CVE-2024-29114

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in W3 Eden, Inc. Download Manager allows Stored XSS.This issue affects Download Manager: from n/a through 3.2.84...

CVE-2024-29114

CVE-2024-29114 is a Stored XSS in the WordPress Download Manager plugin (Download Manager Pro). Affected: Download Manager from n/a up to version 3.2.84. The vulnerability is addressed in patched builds; remediation is to upgrade to a fixed release.

CVE-2024-29114 WordPress Download Manager plugin <= 3.2.84 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in W3 Eden, Inc. Download Manager allows Stored XSS.This issue affects Download Manager: from n/a through 3.2.84...

W3 Eden Addresses Authenticated Stored XSS Vulnerability in Download Manager WordPress Plugin

On April 25, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for a stored Cross-Site Scripting XSS vulnerability in W3 Eden’s Download Manager plugin, which is actively installed on more than 100,000 WordPress websites, making it one of the mos...

W3 Eden Download Manager 3.2.70 Cross Site Scripting

W3 Eden recently patched an Authenticated Stored Cross-Site Scripting vulnerability in Download Manager. On April 25, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for a stored Cross-Site Scripting XSS vulnerability in W3 Eden’s Download...

CVE-2022-45836

Unauth. Reflected Cross-Site Scripting XSS vulnerability in W3 Eden, Inc. Download Manager plugin = 3.2.59 versions...

CVE-2022-45836

Unauth. Reflected Cross-Site Scripting XSS vulnerability in W3 Eden, Inc. Download Manager plugin = 3.2.59 versions...

CVE-2022-45836 WordPress Download Manager Plugin <= 3.2.59 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in W3 Eden, Inc. Download Manager plugin = 3.2.59 versions...

CVE-2022-45836

CVE-2022-45836 affects W3 Eden, Inc. Download Manager plugin for WordPress, version 3.2.59 and earlier. The connected PT-Security entry specifies an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in this plugin, exploitable without authentication. The issue is mitigated by upg...

PT-2023-14776

Name of the Vulnerable Software and Affected Versions W3 Eden, Inc. Download Manager plugin versions 3.2.59 and earlier Description The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited without authentication, allowing for reflect...

w3-directory.com Cross Site Scripting vulnerability OBB-3128505

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-36288

Multiple Cross-Site Request Forgery CSRF vulnerabilities in W3 Eden Download Manager plugin = 3.2.48 at WordPress...

CVE-2022-36288

Multiple Cross-Site Request Forgery CSRF vulnerabilities in W3 Eden Download Manager plugin = 3.2.48 at WordPress...

CVE-2022-34658

Multiple Authenticated contributor+ Persistent Cross-Site Scripting XSS vulnerabilities in W3 Eden Download Manager plugin = 3.2.48 at WordPress...

CVE-2022-34658

Multiple Authenticated contributor+ Persistent Cross-Site Scripting XSS vulnerabilities in W3 Eden Download Manager plugin = 3.2.48 at WordPress...

Cross site request forgery (csrf)

Multiple Cross-Site Request Forgery CSRF vulnerabilities in W3 Eden Download Manager plugin = 3.2.48 at WordPress...

Cross site scripting

Multiple Authenticated contributor+ Persistent Cross-Site Scripting XSS vulnerabilities in W3 Eden Download Manager plugin = 3.2.48 at WordPress...

CVE-2022-36288 WordPress Download Manager plugin <= 3.2.48 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities in W3 Eden Download Manager plugin = 3.2.48 at WordPress...

CVE-2022-36288

CVE-2022-36288 concerns the WordPress Download Manager plugin (versions up to and including 3.2.48). Multiple CSRF vulnerabilities exist in this plugin, allowing arbitrary actions to be performed by an attacker with a logged-in admin user when a user is enticed to visit a crafted page or perform ...

CVE-2022-34658

CVE-2022-34658 concerns the WordPress Download Manager plugin (versions ≤ 3.2.48). The vulnerability is a Stored Cross-Site Scripting (XSS) issue that can be triggered by users with at least a Contributor role (i.e., authenticated users). The root cause is inadequate sanitization/escaping of inpu...